Which concept is a mapping of an identity, including roles, personas, and attributes, to an authorization?

Access control is the overarching system or policy framework governing who can access resources, not the specific mapping of identity attributes to authorization.

Federated Identity Management refers to linking and managing identities across multiple organizations or domains, not the mapping of identity attributes to authorizations.

An authoritative source is the trusted, canonical source of truth for identity data or records, not a mapping of identity to authorization.

Entitlement precisely defines the binding between an identity (including its roles, personas, and attributes) and the authorizations granted to it. It represents the set of permissions or access rights assigned to a specific identity within an IAM framework. This definition is foundational in identity governance and distinguishes entitlement from the broader concepts of authentication or access control policy.

Authentication is the process of verifying that an identity is who it claims to be, not the act of mapping that identity to specific authorizations.